GoKawiilSix million fake stars, $0.06 per click, and a VC funding pipeline that treats GitHub popularity as proof of traction. We ran our own analysis on 20 repos and found the fingerprints.
TL;DR A peer-reviewed CMU study (ICSE 2026) found 6 million fake stars across 18,617 repositories using 301,000 accounts - with AI/LLM repos the largest non-malicious category
across 18,617 repositories using 301,000 accounts - with AI/LLM repos the largest non-malicious category Stars sell for $0.03 to $0.85 each on at least a dozen websites, Fiverr gigs, and Telegram channels - no dark web required
on at least a dozen websites, Fiverr gigs, and Telegram channels - no dark web required VCs explicitly use stars as sourcing signals: Redpoint found the median star count at seed is 2,850 , and firms run automated scrapers to find fast-growing repos
, and firms run automated scrapers to find fast-growing repos We ran our own analysis sampling 150 profiles per repo across 20 projects and found repos where 36-76% of stargazers have zero followers and fork-to-star ratios 10x below organic baselines
and fork-to-star ratios 10x below organic baselines The FTC's 2024 rule banning fake social influence metrics carries penalties of $53,088 per violation - and the SEC has already charged startup founders for inflating traction metrics during fundraising
A GitHub star costs $0.06 at the low end. A seed round unlocks $1 million to $10 million. The math is obvious, and thousands of repositories are exploiting it.
This investigation maps the full ecosystem: from the peer-reviewed research quantifying the problem, to the marketplaces selling stars openly, to the venture capital pipeline that converts star counts into funding decisions. We ran our own analysis on 20 repositories using the GitHub API, sampling thousands of stargazer profiles to independently verify which projects show fingerprints of manipulation - and which don't.
The picture that emerges is a mature, professionalized shadow economy operating in plain sight.
Six million fake stars
... continue reading